Personal Data Protection Act｜第 2 條｜通用｜Act｜In Force
第 一 章｜個人資料保護委員會籌備處｜v1.0
Effective Date: 9999-12-31｜Last Amended: 2025-11-11
The terms used in the PDPA have the following meanings: 1."personal data" refers to a natural person's name, date of birth, national identification Card number, passport number, physical characteristics, fingerprints, marital status, family information, education background, occupation, medical records, healthcare data, genetic data, sex life, records of physical examination, criminal records, contact information, financial conditions, social activities and any other information that may be used to directly or indirectly identify a natural person; 2.a "personal data file" refers to a collection of personal data structured to facilitate data retrieval and management by automated or non-automated means; 3. "collection" refers to the act of collecting personal data in any way; 4."processing" refers to the act of recording, inputting, storing, compiling/editing, correcting, duplicating, retrieving, deleting, outputting, connecting or internally transferring data for the purpose of establishing or using a personal data file; 5."use" refers to the act of using personal data via any methods other than processing; 6."cross-border transfer" refers to the cross-border processing or use of personal data; 7."government agency" refers to central or local government agencies or non-departmental public bodies authorized to exercise public authority; 8."non-government agency" refers to a natural person, legal person or group other than those stated in the preceding subparagraph; and 9."data subject" refers to an individual whose personal data is collected, processed or used.